critical9.8Public exploit code
CVE-2016-5678
NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities2016-08-05 · remote · hardware
Impact
NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuuo | Nvrmini 2 | Versions 1.0.0, 1.1.0, 1.3.0, 1.3.2, 1.4.0, 1.5.1 |
| Nuuo | Nvrsolo | Versions 1.0.0, 1.0.1, 1.1.0, 1.1.0.117, 1.1.1, 1.1.2 |